Ejemplo n.º 1
0
ALL RIGHTS RESERVED
"""
import logging
import os
import sys
from typing import List, Union

from stix2 import NetworkTraffic, properties, CustomExtension


@CustomExtension(
    NetworkTraffic, 'x-dnp3-header',
    [('addr', properties.IntegerProperty()),
     ('al_2bit', properties.IntegerProperty()),
     ('al_aiq_b0', properties.BooleanProperty()),
     ('al_aiq_b1', properties.BooleanProperty()),
     ('al_aiq_b2', properties.BooleanProperty()),
     ('al_aiq_b3', properties.BooleanProperty()),
     ('al_aiq_b4', properties.BooleanProperty()),
     ('al_aiq_b5', properties.BooleanProperty()),
     ('al_aiq_b6', properties.BooleanProperty()),
     ('al_aiq_b7', properties.BooleanProperty()),
     ('al_ana', properties.IntegerProperty()),
     ('al_ana_double', properties.FloatProperty()),
     ('al_ana_float', properties.FloatProperty()),
     ('al_ana_int', properties.IntegerProperty()),
     ('al_anaout', properties.IntegerProperty()),
     ('al_anaout_double', properties.FloatProperty()),
     ('al_anaout_float', properties.FloatProperty()),
     ('al_anaout_int', properties.IntegerProperty()),
Ejemplo n.º 2
0
        return stix_type + "--" + new_uuid


@CustomObservable(
    "x-opencti-simple-observable",
    [
        ("key", properties.StringProperty(required=True)),
        ("value", properties.StringProperty(required=True)),
        ("description", properties.StringProperty()),
        (
            "created_by_ref",
            properties.ReferenceProperty(valid_types="identity",
                                         spec_version="2.1"),
        ),
        ("x_opencti_score", properties.IntegerProperty()),
        ("x_opencti_create_indicator", properties.BooleanProperty()),
        ("labels", properties.ListProperty(properties.StringProperty)),
        ("external_references", properties.ListProperty(ExternalReference)),
        (
            "object_marking_refs",
            properties.ListProperty(
                properties.ReferenceProperty(valid_types="marking-definition",
                                             spec_version="2.1")),
        ),
    ],
)
class SimpleObservable:
    pass


@CustomObject(